Finding Bugs in Windows Drivers, Part 1 – WDM
October 5, 2022 at 2:55:38 PM UTC - permalink -

- https://www.cyberark.com/resources/threat-research-blog/finding-bugs-in-windows-drivers-part-1-wdm

One I/O Ring to Rule Them All: A Full Read/Write Exploit Primitive on Windows 11 – Winsider Seminars & Solutions Inc.
October 5, 2022 at 2:54:53 PM UTC - permalink -

- https://windows-internals.com/one-i-o-ring-to-rule-them-all-a-full-read-write-exploit-primitive-on-windows-11/

ivanlef0u.fr/repo/madchat/
October 3, 2022 at 3:37:56 PM UTC - permalink -

- https://ivanlef0u.fr/repo/madchat/

Ethernaut
October 3, 2022 at 2:33:54 PM UTC - permalink -

- https://ethernaut.openzeppelin.com/

lgandx/PCredz: This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.
October 3, 2022 at 12:38:30 PM UTC - permalink -

- https://github.com/lgandx/PCredz

naksyn/Pyramid: a tool to help operate in EDRs' blind spots
October 3, 2022 at 12:38:08 PM UTC - permalink -

- https://github.com/naksyn/Pyramid

GLPI htmlawed (CVE-2022-35914) | Mayfly
October 3, 2022 at 10:42:31 AM UTC - permalink -

- https://mayfly277.github.io/posts/GLPI-htmlawed-CVE-2022-35914/

Malware development: persistence - part 1. Registry run keys. C++ example. - cocomelonc
September 30, 2022 at 2:11:09 PM UTC - permalink -

- https://cocomelonc.github.io/tutorial/2022/04/20/malware-pers-1.html

APT techniques: Access Token manipulation. Token theft. Simple C++ example. - cocomelonc
September 30, 2022 at 2:09:44 PM UTC - permalink -

- https://cocomelonc.github.io/tutorial/2022/09/25/token-theft-1.html

Windows Kernel Ps Callbacks Experiments · shut up and hack
September 29, 2022 at 11:50:10 PM UTC - permalink -

- http://blog.deniable.org/posts/windows-callbacks/

Active Directory Pentest Lab - Setup | MATRIX.LOCAL - Hebun ilhanlı
September 29, 2022 at 7:10:43 PM UTC - permalink -

- https://www.hebunilhanli.com/wonderland/ad-pentest/ad-pentest-lab-setup/

No-Fix Local Privilege Escalation Using KrbRelay With Shadow Credentials | Icyguider’s Blog
September 29, 2022 at 3:58:17 PM UTC * - permalink -

- https://icyguider.github.io/2022/05/19/NoFix-LPE-Using-KrbRelay-With-Shadow-Credentials.html

xm1k3/cent: Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place
September 29, 2022 at 12:45:45 AM UTC - permalink -

- https://github.com/xm1k3/cent/

NightRang3r/misc_nuclei_templates
September 29, 2022 at 12:45:21 AM UTC - permalink -

- https://github.com/NightRang3r/misc_nuclei_templates

dl.packetstormsecurity.net/9910-exploits/webfolders.txt
September 28, 2022 at 9:35:58 PM UTC * - permalink -

- https://dl.packetstormsecurity.net/9910-exploits/webfolders.txt

mlgualtieri/NTLMRawUnHide: NTLMRawUnhide.py is a Python3 script designed to parse network packet capture files and extract NTLMv2 hashes in a crackable format. The following binary network packet capture formats are supported: *.pcap *.pcapng *.cap *.etl
September 28, 2022 at 2:42:02 PM UTC - permalink -

- https://github.com/mlgualtieri/NTLMRawUnHide

Windows 10 quietly got a built-in network sniffer, how to use
September 28, 2022 at 2:35:41 PM UTC - permalink -

- https://www.bleepingcomputer.com/news/microsoft/windows-10-quietly-got-a-built-in-network-sniffer-how-to-use/

jakejarvis/awesome-shodan-queries: 🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻
September 27, 2022 at 10:34:17 PM UTC - permalink -

- https://github.com/jakejarvis/awesome-shodan-queries

5pider on Twitter: "90% of my Twitter DMs are asking me about how to start getting into Malware development. Well, I love answering them but it's easier to write a small thread about it so here we go. 1/12" / Twitter
September 27, 2022 at 12:35:33 PM UTC - permalink -

- https://twitter.com/C5pider/status/1555256779553906694

FourCoreLabs/EDRHunt: Scan installed EDRs and AVs on Windows
September 27, 2022 at 9:00:47 AM UTC - permalink -

- https://github.com/FourCoreLabs/EDRHunt